SharpPanda
Aliases: Sharp Dragon
- First seen
- 2018-01-01 00:00:00
- Origin
- CN
- Primary motivation
- espionage
- Sophistication
- advanced
- Resource level
- government
- Actor type
- nation-state
- Profile updated
- 2026-07-07 11:48:51
Targeted industries: government-and-public-sector technology-and-telecommunications education-and-nonprofits
Targeted regions: country_code:vn country_code:th country_code:my
Context
SharpPanda, an APT group originating from China, has seen a rise in its cyber-attack operations starting from at least 2018. The APT group utilizes spear-phishing techniques to obtain initial access, employing a combination of outdated Microsoft Office document vulnerabilities, novel evasion techniques, and highly potent backdoor malware.
Reports & references
- bsi.bund.de — Aktive Apt Gruppen Node (report)
- blog.cyble.com — Sharppanda Apt Campaign Expands Its Arsenal Targeting G20 Nations (report)
- rewterz.com — Rewterz Threat Alert Sharppanda Chinese Apt Group Targets Southeast Asian Government Active Iocs (report)
- research.checkpoint.com — Chinese Apt Group Targets Southeast Asian Government With Previously Unknown Backdoor (report)
- research.checkpoint.com — Sharp Dragon Expands Towards Africa And The Caribbean (report)